Description

HESK before 3.1.10 allows reflected XSS.

Remediation

References

CVE-2020-13897

Related Vulnerabilities

WordPress Plugin SEO Redirection-301 Redirect Manager Cross-Site Scripting (6.3)

WordPress Plugin Disable Feeds Unspecified Vulnerability (1.4)

WordPress Plugin WP Poll Maker-Best WordPress Poll for Voting Contest Arbitrary File Upload (3.4)

WordPress Plugin NextGEN Gallery-WordPress Gallery Multiple HTML Injection Vulnerabilities (1.9.0)

WordPress Plugin Slider Revolution Responsive Arbitrary File Upload (3.0.95)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2020-13897